Immutable snapshot copies stored in write once read many (WORM) storage

ABSTRACT

Techniques are provided for storing immutable snapshot copes in write once read many (WORM) storage. A snapshot of a volume may be stored into one or more objects formatted according to an object format. An expiry time may be assigned to the snapshot and the one or more objects based upon a creation time of the snapshot and a retention time. The one or more objects may be stored within a remote object store. The one or more objects are retained in an immutable state and cannot be deleted until expiration of the expiry time. In response to identifying an existing object within the remote object store comprising shared snapshot data referenced by the snapshot, an assigned expiry time of the existing object may be modified based upon the expiry time of the snapshot to create a modified expiry time for the existing object.

BACKGROUND

Many industries, such as financial, automotive, and healthcare industries, may have requirements where data and backup data is to be stored within immutable storage for a particular amount of time for compliance purposes. This data may be stored in an immutable state where the data cannot be deleted or modified for a retention time, such as 1 month. For example, the data may be locked down into a protected state for data retention and compliance purposes, such as by being stored in the immutable storage with write once read many (WORM) access. While in the protected/immutable state, the data cannot be modified or deleted. Once the retention time has expired, the data may be modified or deleted.

DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram illustrating an example computing environment in which an embodiment of the invention may be implemented.

FIG. 2 is a block diagram illustrating a network environment with exemplary node computing devices.

FIG. 3 is a block diagram illustrating an exemplary node computing device.

FIG. 4 is a flow chart illustrating an example method for storing immutable snapshot copes in write once read many (WORM) storage.

FIG. 5A is a block diagram illustrating an example system for storing immutable snapshot copes in write once read many (WORM) storage.

FIG. 5B is a block diagram illustrating an example system for storing immutable snapshot copes in write once read many (WORM) storage, where a first snapshot with a first expiry time is created.

FIG. 5C is a block diagram illustrating an example system for storing immutable snapshot copes in write once read many (WORM) storage, where a first snapshot is stored within one or more objects within a remote object store.

FIG. 5D is a block diagram illustrating an example system for storing immutable snapshot copes in write once read many (WORM) storage, where a second snapshot with a second expiry time is created.

FIG. 5E is a block diagram illustrating an example system for storing immutable snapshot copes in write once read many (WORM) storage, where a first expiry time of one or more existing objects comprising shared snapshot data is modified.

FIG. 6 is a flow chart illustrating an example method for implementing requests associated with objects stored within a remote object store.

FIG. 7 is a component block diagram illustrating an example system for implementing requests associated with objects stored within a remote object store.

FIG. 8 is a component block diagram illustrating an example system for implementing requests associated with objects stored within a remote object store.

FIG. 9 is a component block diagram illustrating an example system for implementing requests associated with objects stored within a remote object store.

FIG. 10A is a component block diagram illustrating an example system for managing objects within an object store using an object file system.

FIG. 10B is an example of a snapshot file system within an object store.

FIG. 10C is an example of an object stored within an object store.

FIG. 11 is an example of a computer readable medium in which an embodiment of the invention may be implemented.

DETAILED DESCRIPTION

Some examples of the claimed subject matter are now described with reference to the drawings, where like reference numerals are generally used to refer to like elements throughout. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide an understanding of the claimed subject matter. It may be evident, however, that the claimed subject matter may be practiced without these specific details. Nothing in this detailed description is admitted as prior art.

Many users are starting to store their data within remote object stores, such as cloud computing environments, which provide relatively cost effective and scalable storage. For example, a client may store data within a volume hosted by a node using storage managed by the node. The client may actively access and modify the data within the volume. The node may generate snapshots of the volume as point in time representations of the volume. The node may store snapshot data of these snapshots into objects formatted according to an object format. The node may then store these objects within a remote object store for long term cost effective storage of snapshots of the volume.

The client may specify or be subject to a storage retention policy where the snapshots are to be retained in an immutable state for a retention time period. In an example, financial data, healthcare data, or other types of data, may be subject to the storage retention policy where the snapshots cannot be deleted or modified for the retention time. For example, the snapshot data of the snapshots stored within the objects are to be retained in the immutable state for 3 months before the snapshots and corresponding objects can be modified or deleted. When an object comprising snapshot data of a snapshot subject to the storage retention policy is stored within the remote object store, an expiry time may be assigned to the object. The expiry time may be based upon a creation time of the snapshot or object and the retention time. The object may remain in the immutable state where the object cannot be modified or delete until expiration of the expiry time. In this way, the snapshot data of the snapshot stored within the object cannot be deleted or modified for the retention time, thus satisfying the storage retention policy.

Snapshot data within an object may be shared by multiple snapshots, and snapshot data of a snapshot may be stored across multiple objects. For example, some snapshot data referenced by a first snapshot (e.g., a base snapshot or an incremental snapshot) may be shared with a second snapshot (e.g., an incremental snapshot created subsequent the first snapshot) because that snapshot data is referenced by both the first snapshot and the second snapshot. This can cause problems when enforcing a storage retention policy because shared snapshot data referenced by two different snapshots having different expiry times may reside in an object having an expiry time that does not comply with both expiry times of the snapshots. For example, a first snapshot may be created, and snapshot data of the first snapshot may be stored within a first object for storage within the remote object store. The first snapshot and the first object may have an expiry time of Jun. 15, 2021, which may correspond to 3 months after the first snapshot and first object are created. 10 days later, a second snapshot may be created, and snapshot data of the second snapshot may be stored within a second object for storage within the remote object store. The second snapshot and the second object may have an expiry time of Jun. 25, 2021, which may correspond to 3 months after the second snapshot and second object are created. However, if the second snapshot with the expiry time of Jun. 25, 2021 reference snapshot data of the first snapshot in the first object having the expiry time of Jun. 10, 2021, the first object could be deleted or modified before Jun. 25, 2021. This would violate the storage retention policy for the second snapshot and second object.

Accordingly, as provided herein, snapshot data of snapshots may be stored within objects in a manner that guarantees that a storage retention policy is not violated notwithstanding multiple snapshots with different expiry times referencing the same shared snapshot data within an object. When a snapshot is created and snapshot data of the snapshot is stored into one or more objects for storage within the remote object store, a scanner may be executed. The scanner is executed in order to determine whether any existing objects within the remote object store comprise shared snapshot data referenced by the snapshot. In particular, the scanner may be configured to interpret metadata structures associated with the existing objects so that the scanner can traverse hierarchical tree structures used to represent snapshot data and bitmaps of snapshots indicating which objects store data of each snapshot. In this way, the scanner can utilize the metadata structures to determine whether the snapshot references shared snapshot data within any existing objects within the remote object store.

The ability to identify objects that comprise shared snapshot data that is shared amongst snapshots provides the ability to identify and modify a current expiry time of an object that comprises shared snapshot data. This shared snapshot data may be shared with a snapshot having a later expiry time than the current expiry time of the object. For example, when the second object is created with the expiry time of Jun. 25, 2021, the scanner is able to traverse the hierarchical tree structure and/or evaluate the bitmaps to identify the first object as storing shared snapshot data referenced by the second snapshot. Accordingly, the expiry time of the first object is modified from Jun. 15, 2021 to Jun. 25, 2021 so that the shared snapshot data shared with the second snapshot cannot be modified or deleted until after Jun. 25, 2021. In this way, the storage retention policy for the second snapshot will not be violated.

Various embodiments of the present technology provide for a wide range of technical effects, advantages, and/or improvements to computing systems and components. For example, various embodiments may include one or more of the following technical effects, advantages, and/or improvements: 1) storing snapshot data into objects according to an object format for storage within long term cost effective and scalable storage of a remote object store, 2) storing the objects in an immutable state where the objects cannot be modified or deleted for a retention time in order to comply with a storage retention policy, 3) implementing a scanner capable of understanding the object format of objects in order to identify objects comprising shared snapshot data referenced and shared by multiple different snapshots, 4) modifying expiry times of objects comprising shared snapshot data that is shared amongst multiple snapshots in order to guarantee that a storage retention policy is not violated for snapshots with later expiry times, 5) calculating an expiry time for an object that takes into account a delta time used to improve the efficiency and reduce the cost and resource consumption associated with updating expiry times, and 6) during a lifecycle of objects within a remote object store (e.g., objects may be moved between different tiers of storage such as a standard storage tier, an archival storage tier, etc.), the objects may be maintained an immutable state in order to comply with a storage retention policy and expiry times of the objects modified to ensure compliance with the storage retention policy regardless of which tier the objects are currently residing.

FIG. 1 is a diagram illustrating an example operating environment 100 in which an embodiment of the techniques described herein may be implemented. In one example, the techniques described herein may be implemented within a client device 128, such as a laptop, a tablet, a personal computer, a mobile device, a server, a virtual machine, a wearable device, etc. In another example, the techniques described herein may be implemented within one or more nodes, such as a first node 130 and/or a second node 132 within a first cluster 134, a third node 136 within a second cluster 138, etc. A node may comprise a storage controller, a server, an on-premise device, a virtual machine such as a storage virtual machine, hardware, software, or combination thereof. The one or more nodes may be configured to manage the storage and access to data on behalf of the client device 128 and/or other client devices. In another example, the techniques described herein may be implemented within a distributed computing platform 102 such as a cloud computing environment (e.g., a cloud storage environment, a multi-tenant platform, a hyperscale infrastructure comprising scalable server architectures and virtual networking, etc.) configured to manage the storage and access to data on behalf of client devices and/or nodes.

In yet another example, at least some of the techniques described herein are implemented across one or more of the client device 128, the one or more nodes 130, 132, and/or 136, and/or the distributed computing platform 102. For example, the client device 128 may transmit operations, such as data operations to read data and write data and metadata operations (e.g., a create file operation, a rename directory operation, a resize operation, a set attribute operation, etc.), over a network 126 to the first node 130 for implementation by the first node 130 upon storage. The first node 130 may store data associated with the operations within volumes or other data objects/structures hosted within locally attached storage, remote storage hosted by other computing devices accessible over the network 126, storage provided by the distributed computing platform 102, etc. The first node 130 may replicate the data and/or the operations to other computing devices, such as to the second node 132, the third node 136, a storage virtual machine executing within the distributed computing platform 102, etc., so that one or more replicas of the data are maintained. For example, the third node 136 may host a destination storage volume that is maintained as a replica of a source storage volume of the first node 130. Such replicas can be used for disaster recovery and failover.

In an embodiment, the techniques described herein are implemented by a storage operating system or are implemented by a separate module that interacts with the storage operating system. The storage operating system may be hosted by the client device, 128, a node, the distributed computing platform 102, or across a combination thereof. In an example, the storage operating system may execute within a storage virtual machine, a hyperscaler, or other computing environment. The storage operating system may implement a storage file system to logically organize data within storage devices as one or more storage objects and provide a logical/virtual representation of how the storage objects are organized on the storage devices. A storage object may comprise any logically definable storage element stored by the storage operating system (e.g., a volume stored by the first node 130, a cloud object stored by the distributed computing platform 102, etc.). Each storage object may be associated with a unique identifier that uniquely identifies the storage object. For example, a volume may be associated with a volume identifier uniquely identifying that volume from other volumes. The storage operating system also manages client access to the storage objects.

The storage operating system may implement a file system for logically organizing data. For example, the storage operating system may implement a write anywhere file layout for a volume where modified data for a file may be written to any available location as opposed to a write-in-place architecture where modified data is written to the original location, thereby overwriting the previous data. In an example, the file system may be implemented through a file system layer that stores data of the storage objects in an on-disk format representation that is block-based (e.g., data is stored within 4 kilobyte blocks and inodes are used to identify files and file attributes such as creation time, access permissions, size and block location, etc.).

In an example, deduplication may be implemented by a deduplication module associated with the storage operating system. Deduplication is performed to improve storage efficiency. One type of deduplication is inline deduplication that ensures blocks are deduplicated before being written to a storage device. Inline deduplication uses a data structure, such as an incore hash store, which maps fingerprints of data to data blocks of the storage device storing the data. Whenever data is to be written to the storage device, a fingerprint of that data is calculated and the data structure is looked up using the fingerprint to find duplicates (e.g., potentially duplicate data already stored within the storage device). If duplicate data is found, then the duplicate data is loaded from the storage device and a byte by byte comparison may be performed to ensure that the duplicate data is an actual duplicate of the data to be written to the storage device. If the data to be written is a duplicate of the loaded duplicate data, then the data to be written to disk is not redundantly stored to the storage device. Instead, a pointer or other reference is stored in the storage device in place of the data to be written to the storage device. The pointer points to the duplicate data already stored in the storage device. A reference count for the data may be incremented to indicate that the pointer now references the data. If at some point the pointer no longer references the data (e.g., the deduplicated data is deleted and thus no longer references the data in the storage device), then the reference count is decremented. In this way, inline deduplication is able to deduplicate data before the data is written to disk. This improves the storage efficiency of the storage device.

Background deduplication is another type of deduplication that deduplicates data already written to a storage device. Various types of background deduplication may be implemented. In an example of background deduplication, data blocks that are duplicated between files are rearranged within storage units such that one copy of the data occupies physical storage. References to the single copy can be inserted into a file system structure such that all files or containers that contain the data refer to the same instance of the data. Deduplication can be performed on a data storage device block basis. In an example, data blocks on a storage device can be identified using a physical volume block number. The physical volume block number uniquely identifies a particular block on the storage device. Additionally, blocks within a file can be identified by a file block number. The file block number is a logical block number that indicates the logical position of a block within a file relative to other blocks in the file. For example, file block number 0 represents the first block of a file, file block number 1 represents the second block, etc. File block numbers can be mapped to a physical volume block number that is the actual data block on the storage device. During deduplication operations, blocks in a file that contain the same data are deduplicated by mapping the file block number for the block to the same physical volume block number, and maintaining a reference count of the number of file block numbers that map to the physical volume block number. For example, assume that file block number 0 and file block number 5 of a file contain the same data, while file block numbers 1-4 contain unique data. File block numbers 1-4 are mapped to different physical volume block numbers. File block number 0 and file block number 5 may be mapped to the same physical volume block number, thereby reducing storage requirements for the file. Similarly, blocks in different files that contain the same data can be mapped to the same physical volume block number. For example, if file block number 0 of file A contains the same data as file block number 3 of file B, file block number 0 of file A may be mapped to the same physical volume block number as file block number 3 of file B.

In another example of background deduplication, a changelog is utilized to track blocks that are written to the storage device. Background deduplication also maintains a fingerprint database (e.g., a flat metafile) that tracks all unique block data such as by tracking a fingerprint and other filesystem metadata associated with block data. Background deduplication can be periodically executed or triggered based upon an event such as when the changelog fills beyond a threshold. As part of background deduplication, data in both the changelog and the fingerprint database is sorted based upon fingerprints. This ensures that all duplicates are sorted next to each other. The duplicates are moved to a dup file. The unique changelog entries are moved to the fingerprint database, which will serve as duplicate data for a next deduplication operation. In order to optimize certain filesystem operations needed to deduplicate a block, duplicate records in the dup file are sorted in certain filesystem sematic order (e.g., inode number and block number). Next, the duplicate data is loaded from the storage device and a whole block byte by byte comparison is performed to make sure duplicate data is an actual duplicate of the data to be written to the storage device. After, the block in the changelog is modified to point directly to the duplicate data as opposed to redundantly storing data of the block.

In an example, deduplication operations performed by a data deduplication layer of a node can be leveraged for use on another node during data replication operations. For example, the first node 130 may perform deduplication operations to provide for storage efficiency with respect to data stored on a storage volume. The benefit of the deduplication operations performed on first node 130 can be provided to the second node 132 with respect to the data on first node 130 that is replicated to the second node 132. In some aspects, a data transfer protocol, referred to as the LRSE (Logical Replication for Storage Efficiency) protocol, can be used as part of replicating consistency group differences from the first node 130 to the second node 132. In the LRSE protocol, the second node 132 maintains a history buffer that keeps track of data blocks that it has previously received. The history buffer tracks the physical volume block numbers and file block numbers associated with the data blocks that have been transferred from first node 130 to the second node 132. A request can be made of the first node 130 to not transfer blocks that have already been transferred. Thus, the second node 132 can receive deduplicated data from the first node 130, and will not need to perform deduplication operations on the deduplicated data replicated from first node 130.

In an example, the first node 130 may preserve deduplication of data that is transmitted from first node 130 to the distributed computing platform 102. For example, the first node 130 may create an object comprising deduplicated data. The object is transmitted from the first node 130 to the distributed computing platform 102 for storage. In this way, the object within the distributed computing platform 102 maintains the data in a deduplicated state. Furthermore, deduplication may be preserved when deduplicated data is transmitted/replicated/mirrored between the client device 128, the first node 130, the distributed computing platform 102, and/or other nodes or devices.

In an example, compression may be implemented by a compression module associated with the storage operating system. The compression module may utilize various types of compression techniques to replace longer sequences of data (e.g., frequently occurring and/or redundant sequences) with shorter sequences, such as by using Huffman coding, arithmetic coding, compression dictionaries, etc. For example, an uncompressed portion of a file may comprise “ggggnnnnnnqqqqqqqqqq”, which is compressed to become “4g6n10q”. In this way, the size of the file can be reduced to improve storage efficiency. Compression may be implemented for compression groups. A compression group may correspond to a compressed group of blocks. The compression group may be represented by virtual volume block numbers. The compression group may comprise contiguous or non-contiguous blocks.

Compression may be preserved when compressed data is transmitted/replicated/mirrored between the client device 128, a node, the distributed computing platform 102, and/or other nodes or devices. For example, an object may be created by the first node 130 to comprise compressed data. The object is transmitted from the first node 130 to the distributed computing platform 102 for storage. In this way, the object within the distributed computing platform 102 maintains the data in a compressed state.

In an example, various types of synchronization may be implemented by a synchronization module associated with the storage operating system. In an example, synchronous replication may be implemented, such as between the first node 130 and the second node 132. It may be appreciated that the synchronization module may implement synchronous replication between any devices within the operating environment 100, such as between the first node 130 of the first cluster 134 and the third node 136 of the second cluster 138 and/or between a node of a cluster and an instance of a node or virtual machine in the distributed computing platform 102.

As an example, during synchronous replication, the first node 130 may receive a write operation from the client device 128. The write operation may target a file stored within a volume managed by the first node 130. The first node 130 replicates the write operation to create a replicated write operation. The first node 130 locally implements the write operation upon the file within the volume. The first node 130 also transmits the replicated write operation to a synchronous replication target, such as the second node 132 that maintains a replica volume as a replica of the volume maintained by the first node 130. The second node 132 will execute the replicated write operation upon the replica volume so that file within the volume and the replica volume comprises the same data. After, the second node 132 will transmit a success message to the first node 130. With synchronous replication, the first node 130 does not respond with a success message to the client device 128 for the write operation until both the write operation is executed upon the volume and the first node 130 receives the success message that the second node 132 executed the replicated write operation upon the replica volume.

In another example, asynchronous replication may be implemented, such as between the first node 130 and the third node 136. It may be appreciated that the synchronization module may implement asynchronous replication between any devices within the operating environment 100, such as between the first node 130 of the first cluster 134 and the distributed computing platform 102. In an example, the first node 130 may establish an asynchronous replication relationship with the third node 136. The first node 130 may capture a baseline snapshot of a first volume as a point in time representation of the first volume. The first node 130 may utilize the baseline snapshot to perform a baseline transfer of the data within the first volume to the third node 136 in order to create a second volume within the third node 136 comprising data of the first volume as of the point in time at which the baseline snapshot was created.

After the baseline transfer, the first node 130 may subsequently create snapshots of the first volume over time. As part of asynchronous replication, an incremental transfer is performed between the first volume and the second volume. In particular, a snapshot of the first volume is created. The snapshot is compared with a prior snapshot that was previously used to perform the last asynchronous transfer (e.g., the baseline transfer or a prior incremental transfer) of data to identify a difference in data of the first volume between the snapshot and the prior snapshot (e.g., changes to the first volume since the last asynchronous transfer). Accordingly, the difference in data is incrementally transferred from the first volume to the second volume. In this way, the second volume will comprise the same data as the first volume as of the point in time when the snapshot was created for performing the incremental transfer. It may be appreciated that other types of replication may be implemented, such as semi-sync replication.

In an embodiment, the first node 130 may store data or a portion thereof within storage hosted by the distributed computing platform 102 by transmitting the data within objects to the distributed computing platform 102. In one example, the first node 130 may locally store frequently accessed data within locally attached storage. Less frequently accessed data may be transmitted to the distributed computing platform 102 for storage within a data storage tier 108. The data storage tier 108 may store data within a service data store 120, and may store client specific data within client data stores assigned to such clients such as a client (1) data store 122 used to store data of a client (1) and a client (N) data store 124 used to store data of a client (N). The data stores may be physical storage devices or may be defined as logical storage, such as a virtual volume, LUNs, or other logical organizations of data that can be defined across one or more physical storage devices. In another example, the first node 130 transmits and stores all client data to the distributed computing platform 102. In yet another example, the client device 128 transmits and stores the data directly to the distributed computing platform 102 without the use of the first node 130.

The management of storage and access to data can be performed by one or more storage virtual machines (SVMs) or other storage applications that provide software as a service (SaaS) such as storage software services. In one example, an SVM may be hosted within the client device 128, within the first node 130, or within the distributed computing platform 102 such as by the application server tier 106. In another example, one or more SVMs may be hosted across one or more of the client device 128, the first node 130, and the distributed computing platform 102. The one or more SVMs may host instances of the storage operating system.

In an example, the storage operating system may be implemented for the distributed computing platform 102. The storage operating system may allow client devices to access data stored within the distributed computing platform 102 using various types of protocols, such as a Network File System (NFS) protocol, a Server Message Block (SMB) protocol and Common Internet File System (CIFS), and Internet Small Computer Systems Interface (iSCSI), and/or other protocols. The storage operating system may provide various storage services, such as disaster recovery (e.g., the ability to non-disruptively transition client devices from accessing a primary node that has failed to a secondary node that is taking over for the failed primary node), backup and archive function, replication such as asynchronous and/or synchronous replication, deduplication, compression, high availability storage, cloning functionality (e.g., the ability to clone a volume, such as a space efficient flex clone), snapshot functionality (e.g., the ability to create snapshots and restore data from snapshots), data tiering (e.g., migrating infrequently accessed data to slower/cheaper storage), encryption, managing storage across various platforms such as between on-premise storage systems and multiple cloud systems, etc.

In one example of the distributed computing platform 102, one or more SVMs may be hosted by the application server tier 106. For example, a server (1) 116 is configured to host SVMs used to execute applications such as storage applications that manage the storage of data of the client (1) within the client (1) data store 122. Thus, an SVM executing on the server (1) 116 may receive data and/or operations from the client device 128 and/or the first node 130 over the network 126. The SVM executes a storage application and/or an instance of the storage operating system to process the operations and/or store the data within the client (1) data store 122. The SVM may transmit a response back to the client device 128 and/or the first node 130 over the network 126, such as a success message or an error message. In this way, the application server tier 106 may host SVMs, services, and/or other storage applications using the server (1) 116, the server (N) 118, etc.

A user interface tier 104 of the distributed computing platform 102 may provide the client device 128 and/or the first node 130 with access to user interfaces associated with the storage and access of data and/or other services provided by the distributed computing platform 102. In an example, a service user interface 110 may be accessible from the distributed computing platform 102 for accessing services subscribed to by clients and/or nodes, such as data replication services, application hosting services, data security services, human resource services, warehouse tracking services, accounting services, etc. For example, client user interfaces may be provided to corresponding clients, such as a client (1) user interface 112, a client (N) user interface 114, etc. The client (1) can access various services and resources subscribed to by the client (1) through the client (1) user interface 112, such as access to a web service, a development environment, a human resource application, a warehouse tracking application, and/or other services and resources provided by the application server tier 106, which may use data stored within the data storage tier 108.

The client device 128 and/or the first node 130 may subscribe to certain types and amounts of services and resources provided by the distributed computing platform 102. For example, the client device 128 may establish a subscription to have access to three virtual machines, a certain amount of storage, a certain type/amount of data redundancy, a certain type/amount of data security, certain service level agreements (SLAs) and service level objectives (SLOs), latency guarantees, bandwidth guarantees, access to execute or host certain applications, etc. Similarly, the first node 130 can establish a subscription to have access to certain services and resources of the distributed computing platform 102.

As shown, a variety of clients, such as the client device 128 and the first node 130, incorporating and/or incorporated into a variety of computing devices may communicate with the distributed computing platform 102 through one or more networks, such as the network 126. For example, a client may incorporate and/or be incorporated into a client application (e.g., software) implemented at least in part by one or more of the computing devices.

Examples of suitable computing devices include personal computers, server computers, desktop computers, nodes, storage servers, nodes, laptop computers, notebook computers, tablet computers or personal digital assistants (PDAs), smart phones, cell phones, and consumer electronic devices incorporating one or more computing device components, such as one or more electronic processors, microprocessors, central processing units (CPU), or controllers. Examples of suitable networks include networks utilizing wired and/or wireless communication technologies and networks operating in accordance with any suitable networking and/or communication protocol (e.g., the Internet). In use cases involving the delivery of customer support services, the computing devices noted represent the endpoint of the customer support delivery process, i.e., the consumer's device.

The distributed computing platform 102, such as a multi-tenant business data processing platform or cloud computing environment, may include multiple processing tiers, including the user interface tier 104, the application server tier 106, and a data storage tier 108. The user interface tier 104 may maintain multiple user interfaces, including graphical user interfaces and/or web-based interfaces. The user interfaces may include the service user interface 110 for a service to provide access to applications and data for a client (e.g., a “tenant”) of the service, as well as one or more user interfaces that have been specialized/customized in accordance with user specific requirements (e.g., as discussed above), which may be accessed via one or more APIs.

The service user interface 110 may include components enabling a tenant to administer the tenant's participation in the functions and capabilities provided by the distributed computing platform 102, such as accessing data, causing execution of specific data processing operations, etc. Each processing tier may be implemented with a set of computers, virtualized computing environments such as a storage virtual machine or storage virtual server, and/or computer components including computer servers and processors, and may perform various functions, methods, processes, or operations as determined by the execution of a software application or set of instructions.

The data storage tier 108 may include one or more data stores, which may include the service data store 120 and one or more client data stores 122-124. Each client data store may contain tenant-specific data that is used as part of providing a range of tenant-specific business and storage services or functions, including but not limited to ERP, CRM, eCommerce, Human Resources management, payroll, storage services, etc. Data stores may be implemented with any suitable data storage technology, including structured query language (SQL) based relational database management systems (RDBMS), file systems hosted by operating systems, object storage, etc.

The distributed computing platform 102 may be a multi-tenant and service platform operated by an entity in order to provide multiple tenants with a set of business related applications, data storage, and functionality. These applications and functionality may include ones that a business uses to manage various aspects of its operations. For example, the applications and functionality may include providing web-based access to business information systems, thereby allowing a user with a browser and an Internet or intranet connection to view, enter, process, or modify certain types of business information or any other type of information.

A clustered network environment 200 that may implement one or more aspects of the techniques described and illustrated herein is shown in FIG. 2 . The clustered network environment 200 includes data storage apparatuses 202(1)-202(n) that are coupled over a cluster or cluster fabric 204 that includes one or more communication network(s) and facilitates communication between the data storage apparatuses 202(1)-202(n) (and one or more modules, components, etc. therein, such as, node computing devices 206(1)-206(n), for example), although any number of other elements or components can also be included in the clustered network environment 200 in other examples. This technology provides a number of advantages including methods, non-transitory computer readable media, and computing devices that implement the techniques described herein.

In this example, node computing devices 206(1)-206(n) can be primary or local storage controllers or secondary or remote storage controllers that provide client devices 208(1)-208(n) with access to data stored within data storage devices 210(1)-210(n) and cloud storage device(s) 236 (also referred to as cloud storage node(s)). The node computing devices 206(1)-206(n) may be implemented as hardware, software (e.g., a storage virtual machine), or combination thereof.

The data storage apparatuses 202(1)-202(n) and/or node computing devices 206(1)-206(n) of the examples described and illustrated herein are not limited to any particular geographic areas and can be clustered locally and/or remotely via a cloud network, or not clustered in other examples. Thus, in one example the data storage apparatuses 202(1)-202(n) and/or node computing device 206(1)-206(n) can be distributed over a plurality of storage systems located in a plurality of geographic locations (e.g., located on-premise, located within a cloud computing environment, etc.); while in another example a clustered network can include data storage apparatuses 202(1)-202(n) and/or node computing device 206(1)-206(n) residing in a same geographic location (e.g., in a single on-site rack).

In the illustrated example, one or more of the client devices 208(1)-208(n), which may be, for example, personal computers (PCs), computing devices used for storage (e.g., storage servers), or other computers or peripheral devices, are coupled to the respective data storage apparatuses 202(1)-202(n) by network connections 212(1)-212(n). Network connections 212(1)-212(n) may include a local area network (LAN) or wide area network (WAN) (i.e., a cloud network), for example, that utilize TCP/IP and/or one or more Network Attached Storage (NAS) protocols, such as a Common Internet Filesystem (CIFS) protocol or a Network Filesystem (NFS) protocol to exchange data packets, a Storage Area Network (SAN) protocol, such as Small Computer System Interface (SCSI) or Fiber Channel Protocol (FCP), an object protocol, such as simple storage service (S3), and/or non-volatile memory express (NVMe), for example.

Illustratively, the client devices 208(1)-208(n) may be general-purpose computers running applications and may interact with the data storage apparatuses 202(1)-202(n) using a client/server model for exchange of information. That is, the client devices 208(1)-208(n) may request data from the data storage apparatuses 202(1)-202(n) (e.g., data on one of the data storage devices 210(1)-210(n) managed by a network storage controller configured to process I/O commands issued by the client devices 208(1)-208(n)), and the data storage apparatuses 202(1)-202(n) may return results of the request to the client devices 208(1)-208(n) via the network connections 212(1)-212(n).

The node computing devices 206(1)-206(n) of the data storage apparatuses 202(1)-202(n) can include network or host nodes that are interconnected as a cluster to provide data storage and management services, such as to an enterprise having remote locations, cloud storage (e.g., a storage endpoint may be stored within cloud storage device(s) 236), etc., for example. Such node computing devices 206(1)-206(n) can be attached to the cluster fabric 204 at a connection point, redistribution point, or communication endpoint, for example. One or more of the node computing devices 206(1)-206(n) may be capable of sending, receiving, and/or forwarding information over a network communications channel, and could comprise any type of device that meets any or all of these criteria.

In an example, the node computing devices 206(1) and 206(n) may be configured according to a disaster recovery configuration whereby a surviving node provides switchover access to the storage devices 210(1)-210(n) in the event a disaster occurs at a disaster storage site (e.g., the node computing device 206(1) provides client device 212(n) with switchover data access to data storage devices 210(n) in the event a disaster occurs at the second storage site). In other examples, the node computing device 206(n) can be configured according to an archival configuration and/or the node computing devices 206(1)-206(n) can be configured based on another type of replication arrangement (e.g., to facilitate load sharing). Additionally, while two node computing devices are illustrated in FIG. 2 , any number of node computing devices or data storage apparatuses can be included in other examples in other types of configurations or arrangements.

As illustrated in the clustered network environment 200, node computing devices 206(1)-206(n) can include various functional components that coordinate to provide a distributed storage architecture. For example, the node computing devices 206(1)-206(n) can include network modules 214(1)-214(n) and disk modules 216(1)-216(n). Network modules 214(1)-214(n) can be configured to allow the node computing devices 206(1)-206(n) (e.g., network storage controllers) to connect with client devices 208(1)-208(n) over the storage network connections 212(1)-212(n), for example, allowing the client devices 208(1)-208(n) to access data stored in the clustered network environment 200.

Further, the network modules 214(1)-214(n) can provide connections with one or more other components through the cluster fabric 204. For example, the network module 214(1) of node computing device 206(1) can access the data storage device 210(n) by sending a request via the cluster fabric 204 through the disk module 216(n) of node computing device 206(n) when the node computing device 206(n) is available. Alternatively, when the node computing device 206(n) fails, the network module 214(1) of node computing device 206(1) can access the data storage device 210(n) directly via the cluster fabric 204. The cluster fabric 204 can include one or more local and/or wide area computing networks (i.e., cloud networks) embodied as Infiniband, Fibre Channel (FC), or Ethernet networks, for example, although other types of networks supporting other protocols can also be used.

Disk modules 216(1)-216(n) can be configured to connect data storage devices 210(1)-210(n), such as disks or arrays of disks, SSDs, flash memory, or some other form of data storage, to the node computing devices 206(1)-206(n). Often, disk modules 216(1)-216(n) communicate with the data storage devices 210(1)-210(n) according to the SAN protocol, such as SCSI or FCP, for example, although other protocols can also be used. Thus, as seen from an operating system on node computing devices 206(1)-206(n), the data storage devices 210(1)-210(n) can appear as locally attached. In this manner, different node computing devices 206(1)-206(n), etc. may access data blocks, files, or objects through the operating system, rather than expressly requesting abstract files.

While the clustered network environment 200 illustrates an equal number of network modules 214(1)-214(n) and disk modules 216(1)-216(n), other examples may include a differing number of these modules. For example, there may be a plurality of network and disk modules interconnected in a cluster that do not have a one-to-one correspondence between the network and disk modules. That is, different node computing devices can have a different number of network and disk modules, and the same node computing device can have a different number of network modules than disk modules.

Further, one or more of the client devices 208(1)-208(n) can be networked with the node computing devices 206(1)-206(n) in the cluster, over the storage connections 212(1)-212(n). As an example, respective client devices 208(1)-208(n) that are networked to a cluster may request services (e.g., exchanging of information in the form of data packets) of node computing devices 206(1)-206(n) in the cluster, and the node computing devices 206(1)-206(n) can return results of the requested services to the client devices 208(1)-208(n). In one example, the client devices 208(1)-208(n) can exchange information with the network modules 214(1)-214(n) residing in the node computing devices 206(1)-206(n) (e.g., network hosts) in the data storage apparatuses 202(1)-202(n).

In one example, the storage apparatuses 202(1)-202(n) host aggregates corresponding to physical local and remote data storage devices, such as local flash or disk storage in the data storage devices 210(1)-210(n), for example. One or more of the data storage devices 210(1)-210(n) can include mass storage devices, such as disks of a disk array. The disks may comprise any type of mass storage devices, including but not limited to magnetic disk drives, flash memory, and any other similar media adapted to store information, including, for example, data and/or parity information.

The aggregates include volumes 218(1)-218(n) in this example, although any number of volumes can be included in the aggregates. The volumes 218(1)-218(n) are virtual data stores or storage objects that define an arrangement of storage and one or more filesystems within the clustered network environment 200. Volumes 218(1)-218(n) can span a portion of a disk or other storage device, a collection of disks, or portions of disks, for example, and typically define an overall logical arrangement of data storage. In one example volumes 218(1)-218(n) can include stored user data as one or more files, blocks, or objects that may reside in a hierarchical directory structure within the volumes 218(1)-218(n).

Volumes 218(1)-218(n) are typically configured in formats that may be associated with particular storage systems, and respective volume formats typically comprise features that provide functionality to the volumes 218(1)-218(n), such as providing the ability for volumes 218(1)-218(n) to form clusters, among other functionality. Optionally, one or more of the volumes 218(1)-218(n) can be in composite aggregates and can extend between one or more of the data storage devices 210(1)-210(n) and one or more of the cloud storage device(s) 236 to provide tiered storage, for example, and other arrangements can also be used in other examples.

In one example, to facilitate access to data stored on the disks or other structures of the data storage devices 210(1)-210(n), a filesystem may be implemented that logically organizes the information as a hierarchical structure of directories and files. In this example, respective files may be implemented as a set of disk blocks of a particular size that are configured to store information, whereas directories may be implemented as specially formatted files in which information about other files and directories are stored.

Data can be stored as files or objects within a physical volume and/or a virtual volume, which can be associated with respective volume identifiers. The physical volumes correspond to at least a portion of physical storage devices, such as the data storage devices 210(1)-210(n) (e.g., a Redundant Array of Independent (or Inexpensive) Disks (RAID system)) whose address, addressable space, location, etc. does not change. Typically the location of the physical volumes does not change in that the range of addresses used to access it generally remains constant.

Virtual volumes, in contrast, can be stored over an aggregate of disparate portions of different physical storage devices. Virtual volumes may be a collection of different available portions of different physical storage device locations, such as some available space from disks, for example. It will be appreciated that since the virtual volumes are not “tied” to any one particular storage device, virtual volumes can be said to include a layer of abstraction or virtualization, which allows it to be resized and/or flexible in some regards.

Further, virtual volumes can include one or more logical unit numbers (LUNs), directories, Qtrees, files, and/or other storage objects, for example. Among other things, these features, but more particularly the LUNs, allow the disparate memory locations within which data is stored to be identified, for example, and grouped as data storage unit. As such, the LUNs may be characterized as constituting a virtual disk or drive upon which data within the virtual volumes is stored within an aggregate. For example, LUNs are often referred to as virtual drives, such that they emulate a hard drive, while they actually comprise data blocks stored in various parts of a volume.

In one example, the data storage devices 210(1)-210(n) can have one or more physical ports, wherein each physical port can be assigned a target address (e.g., SCSI target address). To represent respective volumes, a target address on the data storage devices 210(1)-210(n) can be used to identify one or more of the LUNs. Thus, for example, when one of the node computing devices 206(1)-206(n) connects to a volume, a connection between the one of the node computing devices 206(1)-206(n) and one or more of the LUNs underlying the volume is created.

Respective target addresses can identify multiple of the LUNs, such that a target address can represent multiple volumes. The I/O interface, which can be implemented as circuitry and/or software in a storage adapter or as executable code residing in memory and executed by a processor, for example, can connect to volumes by using one or more addresses that identify the one or more of the LUNs.

Referring to FIG. 3 , node computing device 206(1) in this particular example includes processor(s) 300, a memory 302, a network adapter 304, a cluster access adapter 306, and a storage adapter 308 interconnected by a system bus 310. In other examples, the node computing device 206(1) comprises a virtual machine, such as a virtual storage machine. The node computing device 206(1) also includes a storage operating system 312 installed in the memory 302 that can, for example, implement a RAID data loss protection and recovery scheme to optimize reconstruction of data of a failed disk or drive in an array, along with other functionality such as deduplication, compression, snapshot creation, data mirroring, synchronous replication, asynchronous replication, encryption, etc. In some examples, the node computing device 206(n) is substantially the same in structure and/or operation as node computing device 206(1), although the node computing device 206(n) can also include a different structure and/or operation in one or more aspects than the node computing device 206(1).

The network adapter 304 in this example includes the mechanical, electrical and signaling circuitry needed to connect the node computing device 206(1) to one or more of the client devices 208(1)-208(n) over network connections 212(1)-212(n), which may comprise, among other things, a point-to-point connection or a shared medium, such as a local area network. In some examples, the network adapter 304 further communicates (e.g., using TCP/IP) via the cluster fabric 204 and/or another network (e.g. a WAN) (not shown) with cloud storage device(s) 236 to process storage operations associated with data stored thereon.

The storage adapter 308 cooperates with the storage operating system 312 executing on the node computing device 206(1) to access information requested by one of the client devices 208(1)-208(n) (e.g., to access data on a data storage device 210(1)-210(n) managed by a network storage controller). The information may be stored on any type of attached array of writeable media such as magnetic disk drives, flash memory, and/or any other similar media adapted to store information.

In the exemplary data storage devices 210(1)-210(n), information can be stored in data blocks on disks. The storage adapter 308 can include I/O interface circuitry that couples to the disks over an I/O interconnect arrangement, such as a storage area network (SAN) protocol (e.g., Small Computer System Interface (SCSI), Internet SCSI (iSCSI), hyperSCSI, Fiber Channel Protocol (FCP)). The information is retrieved by the storage adapter 308 and, if necessary, processed by the processor(s) 300 (or the storage adapter 308 itself) prior to being forwarded over the system bus 310 to the network adapter 304 (and/or the cluster access adapter 306 if sending to another node computing device in the cluster) where the information is formatted into a data packet and returned to a requesting one of the client devices 208(1)-208(n) and/or sent to another node computing device attached via the cluster fabric 204. In some examples, a storage driver 314 in the memory 302 interfaces with the storage adapter to facilitate interactions with the data storage devices 210(1)-210(n).

The storage operating system 312 can also manage communications for the node computing device 206(1) among other devices that may be in a clustered network, such as attached to a cluster fabric 204. Thus, the node computing device 206(1) can respond to client device requests to manage data on one of the data storage devices 210(1)-210(n) or cloud storage device(s) 236 (e.g., or additional clustered devices) in accordance with the client device requests.

The file system module 318 of the storage operating system 312 can establish and manage one or more filesystems including software code and data structures that implement a persistent hierarchical namespace of files and directories, for example. As an example, when a new data storage device (not shown) is added to a clustered network system, the file system module 318 is informed where, in an existing directory tree, new files associated with the new data storage device are to be stored. This is often referred to as “mounting” a filesystem.

In the example node computing device 206(1), memory 302 can include storage locations that are addressable by the processor(s) 300 and adapters 304, 306, and 308 for storing related software application code and data structures. The processor(s) 300 and adapters 304, 306, and 308 may, for example, include processing elements and/or logic circuitry configured to execute the software code and manipulate the data structures.

The storage operating system 312, portions of which are typically resident in the memory 302 and executed by the processor(s) 300, invokes storage operations in support of a file service implemented by the node computing device 206(1). Other processing and memory mechanisms, including various computer readable media, may be used for storing and/or executing application instructions pertaining to the techniques described and illustrated herein. For example, the storage operating system 312 can also utilize one or more control files (not shown) to aid in the provisioning of virtual machines.

In this particular example, the memory 302 also includes a module configured to implement the techniques described herein, including for example atomic writes for persistent memory as discussed above and further below.

The examples of the technology described and illustrated herein may be embodied as one or more non-transitory computer or machine readable media, such as the memory 302, having machine or processor-executable instructions stored thereon for one or more aspects of the present technology, which when executed by processor(s), such as processor(s) 300, cause the processor(s) to carry out the steps necessary to implement the methods of this technology, as described and illustrated with the examples herein. In some examples, the executable instructions are configured to perform one or more steps of a method described and illustrated later.

One embodiment of storing immutable snapshot copies in write once read many (WORM) storage is illustrated by an exemplary method 400 of FIG. 4 , which is further described in conjunction with system 500 of FIGS. 5A-5E. A node 502 may provide storage services to one or more clients such as client 501, as illustrated by FIG. 5A. The node 502 may comprise a service, a virtual machine, a container (e.g., a Kubernete container), functionality hosted through a Quark pod, a cloud computing environment, an on-premise device, software, hardware, or a combination thereof. In an example, the client 501 may store data within a volume 504 hosted by the node 502, which may be stored within local storage managed by the node 502. The node 502 may provide various storage services for the volume 504. For example, the node 502 may provide backup and restore functionality by creating snapshots of the volume 504 as point in time representations of the volume 504. The node 502 may use a snapshot to restore the volume 504 back to a point in time representation of the volume 504 captured by the snapshot. The node 502 may be configured to enforce storage retention polices for the snapshots. A storage retention policy may specify that a snapshot must be stored in an immutable state where the snapshot cannot be modified or deleted for a retention time/period, such as for 5 months. The node 502 may be configured to store the snapshots within a remote object store 506 (an object store remote to the node 502, thus referred to as a remote object store), such as a cloud computing environment, which may provide cost effective long term and scalable storage for storing the snapshots.

In an example, the node 502 may create a first snapshot 508 of the volume 504 as a first point in time representation of the volume 504, as illustrated by FIG. 5B. The first snapshot 508 may be assigned a first expiry time 510 based upon a retention time specified by the storage retention policy. The retention time may be defined as a period of time during which the first snapshot 508 is to be retained in the immutable state (e.g., stored within a WORM bucket of the remote object store 506) and cannot be deleted or modified.

In some embodiments, the first expiry time 510 may be derived from a first creation time of the first snapshot 508 and the retention time. If the first snapshot 508 is created on Jul. 10, 2021 and the retention time is 5 months, then the first expiry time 510 may be specified as Dec. 10, 2021. The first expiry time 510 may be defined such that the first expiry time 510 may be extended but is blocked from being shorted/reduced so that the storage retention policy is not violated.

In some embodiments, the first expiry time 510 may be derived from the creation time of the first snapshot 508, the retention time specified by the storage retention policy, and a delta time. The delta time may be an additional amount of time added to an expiry time in order to improve efficiency by reducing the frequency of executing a scanner to identify and update expiry times of objects comprising shared snapshot data shared amongst multiple snapshots. That is, if the retention time is 5 months and expiry times are set to 5 months from when snapshots are created, then the scanner will be executed every time a new snapshot is created. This is inefficient and unnecessarily consumes a large amount of resources and time during snapshot creation because the scanner is executed every time a new snapshot is created. If the delta time is additionally added to expiry times (e.g., an additional 10 days), then the scanner may be executed less frequently. In some embodiments, the delta time may be determined based upon a cost metric associated with time and resources consumed by the scanner for identifying and updating assigned expiry times of existing objects comprising shared snapshot data shared with newly created snapshots. The larger the cost metric, the larger the delta time in order to reduce time and resource consumption by executing the scanner less frequently. In some embodiments, the delta time may be determined based upon a frequency at which snapshots of the volume are created. The more frequently snapshots are created, the larger the delta time in order to reduce time and resource consumption by executing the scanner less frequently.

The node 502 may be configured to store snapshot data of snapshots within objects that are stored into the remote object store 506. The objects may be formatted according to an object format, which is further described in relation to FIGS. 10A-10C. During operation 402 of method 400 of FIG. 4 , snapshot data of the first snapshot 508 may be stored within one or more objects by the node 502 for subsequent transmission to the remote object store 506 for storage, as illustrated by FIG. 5C. For example, the snapshot data of the first snapshot 508 may be stored across a first object 512, a second object 514, a third object 518, and a fourth object 522. The first object 512, the second object 514, the third object 518, and the fourth object 522 may be created to store the snapshot data of the first snapshot 508, and may be transmitted over a network by the node 502 to the remote object store 506 for storage within storage of the remote object store 506 (e.g., within a write once read many (WORM) bucket of storage hosted by the remote object store 506).

During operation 404 of method 400 of FIG. 4 , the first object 512, the second object 514, the third object 518, and the fourth object 522 may be assigned to the first expiry time 510 of the first snapshot 508 (e.g., Dec. 10, 2021) because the first object 512, the second object 514, the third object 518, and the fourth object 522 were created to store the snapshot data of the first object 512. In this way, the first object 512, the second object 514, the third object 518, and the fourth object 522 assigned the first expiry time 510 may be transmitted 526 to and stored within the remote object store 506, during operation 406 of method 400 of FIG. 4 . The first object 512, the second object 514, the third object 518, and the fourth object 522 may be retained in an immutable state where the first object 512, the second object 514, the third object 518, and the fourth object 522 cannot be modified or deleted until expiration of the first expiry time 510, such as after Dec. 10, 2021.

At a subsequent point in time, a second snapshot 530 of the volume 504 may be created by the node 502. For example, the second snapshot 530 may be created 5 days after the first snapshot 508 on Jul. 15, 2021. A second expiry time 532 may be assigned to the second snapshot 530. In some embodiments, the second expiry time 532 may be derived from a second creation time of the second snapshot 530 and the retention time. If the second snapshot 530 is created on Jul. 15, 2021 and the retention time is 5 months, then the second expiry time 532 may be specified as Dec. 15, 2021. The second expiry time 532 may be defined such that the second expiry time 532 may be extended but is blocked from being shorted.

In some embodiments, the second expiry time 532 may be derived from the creation time of the second snapshot 530, the retention time specified by the storage retention policy, and the delta time. The delta time may be an additional amount of time added to the second expiry time 532 and/or other expiry times in order to improve efficiency by reducing the frequency of executing a scanner to identify and update expiry times of objects comprising shared snapshot data shared amongst multiple snapshots. That is, if the retention time is 5 months and expiry times are set to 5 months from when snapshots are created, then the scanner will be executed every time a new snapshot is created. This is inefficient and unnecessarily consumes a large amount of resources and time during snapshot creation because the scanner is executed every time a new snapshot is created. If the delta time is additionally added to expiry times (e.g., an additional 10 days), then the scanner may be executed less frequently. In some embodiments, the delta time may be determined based upon a cost metric associated with time and resources consumed by the scanner for identifying and updating assigned expiry times of existing objects comprising shared snapshot data shared with newly created snapshots. The larger the cost metric, the larger the delta time in order to reduce time and resource consumption by executing the scanner less frequently. In some embodiments, the delta time may be determined based upon a frequency at which snapshots of the volume are created. The more frequently snapshots are created, the larger the delta time in order to reduce time and resource consumption by executing the scanner less frequently.

During operation 408 of method 400 of FIG. 4 , the node 502 may store snapshot data of the second snapshot 530 into a fifth object 544 formatted according to the object format. During operation 410 of method 400 of FIG. 4 , the fifth object 544 may be assigned the second expiry time 532 of the second snapshot 530 because the fifth object 544 is created to store the snapshot data of the second snapshot 530. During operation 412 of method 400 of FIG. 4 , the node 502 transmits 542 the fifth object 544 to the remote object store 506 for storage within storage of the remote object store 506 (e.g., within a WORM bucket of storage hosted by the remote object store 506). The fifth object 544 may be retained in an immutable state where the fifth object 544 cannot be modified or deleted until expiration of the second expiry time 532, such as after Dec. 15, 2021.

In some instances, the second snapshot 530 and the first snapshot 508 may both reference and share the same snapshot data, which is referred to as shared snapshot data. For example, the first snapshot 508 is a prior snapshot of the volume 504 (e.g., a base snapshot or an incremental snapshot) and the second snapshot 530 is a subsequent snapshot of the volume 504 (e.g., a subsequently generated incremental snapshot). The first snapshot 508 and the second snapshot 530 may both share and reference shared snapshot data stored within one or more existing objects comprising the snapshot data of the first snapshot 508. For example, one or more of the first object 512, the second object 514, the third object 518, or the fourth object 522 may comprise shared snapshot data referenced by both the first snapshot 508 and the second snapshot 530 (e.g., data of the volume 504 that is common and did not change between when the first snapshot 508 was created and when the second snapshot 530 was created). The fifth object 544 may comprise data of the volume 504 that changed between when the first snapshot 508 was created and when the second snapshot 530 was created, and thus is unique to and is captured by the second snapshot 530, but not the first snapshot 508.

If the second snapshot 530 having the second expiry time 532 of Dec. 15, 2021 references the shared snapshot data stored within one or more of the first object 512, the second object 514, the third object 518, or the fourth object 522 having the first expiry time 510 of Dec. 10, 2021, then the storage retention policy could potentially be violated for the second snapshot 530. This violation could occur if any of the objects comprising the shared snapshot data is deleted or modified after expiration of the first expiry time 510 of Dec. 10, 2021 but before expiration of the second expiry time 532 of Dec. 15, 2021.

Accordingly, a scanner 401 may be executed to evaluate metadata structures associated with the object format to identify any existing objects as comprising shared snapshot data referenced by the second snapshot 530. For example, the object format of the objects stored within the remote object store 506 may represent a snapshot using a hierarchical tree structure comprising a super block, a snapshots root block an inofile, one or more levels of indirect blocks, and a bottom level of direct blocks corresponding to snapshot data of the snapshot, which is further described in conjunction with FIGS. 10A-10C.

This information may be accessible through the metadata structures, and the scanner 401 may be configured to interpret these metadata structures in order to traverse the hierarchical tree structure for identifying any existing objects as comprising shared snapshot data referenced by the second snapshot 530. In an example, the metadata structures may correspond to bitmaps (e.g., object identifier maps) of snapshots. Each snapshot may be associated with a corresponding bitmap. The bitmap for a snapshot may comprise bits that are set to indicate which objects within the remote object store 506 comprise snapshot data of the snapshot. The scanner 401 may evaluate a first bitmap for the first snapshot 508, a second bitmap for the second snapshot 530, and/or other bitmaps for other snapshots in order to identify any overlap between the second bitmap for the second snapshot 530 with other bitmaps of other snapshots. For example, the scanner 401 may determine that the first bitmap for the first snapshot 508 and the second bitmap for the second snapshot 530 may have an overlap where the third object 518 and the fourth object 522 both comprise snapshot data (shared snapshot data) of the first snapshot 508 and the second snapshot 530. In this way, the third object 518 and the fourth object 522 may be identified as existing objects comprising shared snapshot data referenced by the second snapshot 530.

In response to identifying the third object 518 and the fourth object 522 as comprising shared snapshot data referenced by the second snapshot 530, the first expiry time 510 of the third object 518 and the fourth object 522 may be modified 540 to be the second expiry time 532 of the second snapshot 530, during operation 414 of method 400 of FIG. 4 . In this way, the assigned first expiry time 510 of Dec. 10, 2021 of the third object 518 and the fourth object 522 may be increased/extended to be the second expiry time 532 of Dec. 15, 2021 of the second snapshot 530. This ensures that the storage retention policy for the second snapshot 530 cannot be violated because all objects comprising snapshot data referenced by the second snapshot 530 will be retained in the immutable state where the objects cannot be modified or deleted until after expiration of the second expiry time 532, thus satisfying the retention time of the storage retention policy.

In some embodiments, expiration times assigned to objects may be retained notwithstanding the objects being migrated from one storage tier to another storage tier. For example, if the first object 512 having the first expiry time 510 and the third object 518 now having the second expiry time 532 are migrated from a standard storage tier of the remote object store 506 to an archival storage tier (e.g., a slower/cheaper storage tier), then the first object 512 will retain the first expiry time 510 and the third object 518 will retain the second expiry time 532.

The techniques provided herein natively enable write once read many (WORM) capabilities on backup snapshots while backing up WORM compliant primary volumes (e.g., a volume hosted by a node where data is stored within the volume in a WORM state for compliance purposes) using the backup snapshots. For example, a user may expect that backups of a WORM compliant primary volume will be WORM compliant and comply with a storage retention policy. The ability to use object compliance where objects are stored in a manner that complies with the storage retention policy provides users with compliance enforcement by 2 different software stacks or 2 different storage vendors (e.g., primary volume software and object store software vendors). This provides the user with redundancy in compliance protection across different software stacks or vendors.

The techniques provided herein can be leveraged to protect against ransomware. Since snapshot copies are immutable and cannot be deleted or modified, an unauthorized person or software, even with full access to a remote object store, cannot alter the content of snapshots or objects comprising snapshot data of the snapshots.

FIGS. 6 and 7 depict examples 600, 700 of snapshot creation of a snapshot that be used by an on-demand restore process. In an embodiment, a user selects a volume, and requests creation of a snapshot-in-cloud. An SDE (e.g., a client) creates a CR for the snapshot-in-cloud (e.g., a custom resource (CR) records the snapshot-in-cloud UUID provided by SDE). Pod (e.g., a component/module implemented by software, hardware, or combination there) picks up the custom resource (CR) for Cloud Snapshot creation and sends a POST to a primary storage container to start the transfer. A POST payload includes the following: cloud bucket info and credentials (bucket info, secret/access) and Snapshot UUID. The primary storage container does the following upon receiving the request: creates a mirroring relationship if not present; creates or recreates object store configuration if not present or if information has changed; triggers a ‘mirror update’ or ‘mirror initialize’ depending on whether this was the first time snapshot-in-cloud was created or this is a subsequent creation; any failure in the above steps will return an error to POST response. The Pod updates CR with some indication that transfer is ‘in progress’ so that the Pod will now start sending a GET. A mirror transfer is started and automatically creates a Snapshot on the source volume to replicate to the cloud bucket. UUID for the Snapshot is supplied by SDE, and the Snapshot on the volume will be stamped with this same UUID. Once a snapshot-in-cloud is created for a volume, there will be a single Snapshot on the source volume while transfer is idle, and two such Snapshots while the transfer is running. The Snapshot (Volume Snapshot) is stamped with the same UUID. The Pod polls a primary storage container using a GET which returns: Status Creating, created or an error, bytes transferred, transfer progress in % (to be stored in CRD), endpoint UUID (to be stored in CRD), logical space (to be stored in CRD). When transfer completes, the Pod updates the CRD indicating Snapshot-in-cloud is created.

FIG. 8 depicts an example 800 of snapshot management utilizing a data connector component (ADC), such as deleting a snapshot. In an embodiment, a user selects a Snapshot-in-cloud to delete from the UI. An SDE (via NVC Client) deletes the Snapshot-in-cloud CR. The Pod and SMC Controller detects the Snapshot-in-cloud CR deletion. The SMC Controller checks to see whether the Volume CR is present or not. If the Volume CR is present, this indicates that the Pod is still alive and allows Pod to handle the Snapshot-in-cloud deletion. If the Volume CR is gone, SMC Controller handles the deletion. If the Volume CR is present: Pod repeatedly sends DELETE REST request to primary storage container until complete (i.e., return HTTP Status 404); and primary storage container asynchronously deletes the objects associated with individual Snapshot-in-cloud or the endpoint from the bucket. If the Volume CR not is present: SMC Controller sends DELETE REST request to data connector component (ADC) until complete (i.e., returns HTTP Status 404); and the ADC either marks the Snapshot-in-cloud as deleted or asynchronously deletes the endpoint (all objects) from the bucket. Once the Pod or SMC Controller receives a NOT FOUND response from primary storage container/ADC respectively, the finalizer is removed from the Snapshot-in-cloud CR, allowing the CR to be completely removed.

FIG. 9 depicts an example 900 of snapshot management, such as performing a snapshot restore by an on-demand restore process. In an embodiment, a user selects the cloud snapshot in the front end which is to be restored. The SDE creates a Volume Custom Resource (CR) to be used for Cloud Snapshot Restore. This CR stores the cloud snapshot UUID. NVC picks up the Volume CR to be used to create the Quark POD. In an example, the space needed for the restored primary storage container is 30% more than the logical space of the cloud snapshot. NVC creates a new Quark POD based on the Volume CR. Based on the Snapshot-in-cloud UUID present in the Volume CR, the primary storage container volume will be created as a DP volume used for OnDemand restore. NVC updates the volume status in the Volume CR after the POD creation is successful. In an example, the volume is not usable by the clients at this point. Volume GET returns ‘offline’ state at this point.

Pod (from the POD created), picks up the endpoint details from the Snapshot-in-cloud CR and issues REST calls to the primary storage container to start Ondemand restore. The pod updates the Snapshot-in-cloud CR by incrementing a refcount to prevent deletion of the CR. The pod sends a PATCH request to a primary storage container with an endpoint and cloud snapshot details (REST API details). The primary storage container issues Ondemand restore to the DP volume from the cloud snapshot. The pod keeps polling the primary storage container for Ondemand restore progress using GET calls.

While restore is in the setup phase, a state of ‘preparing’ will be return. Once this changes to ‘restoring’, the volume is considered mountable by the client. The pod updates the Ondemand restore progress in the Volume CR. Once GET returns a ‘restoring’ state, the pod updates the Volume CR to indicate that volume is ready to be mounted. The pod sets ‘restoring’ and ‘online’ state in Volume CR. The primary storage container converts the DP volume to Read-Write. The volume can be used by the clients. The volume remains an Ondemand volume and clients may observe lower performance. NVC client creates a VolumeOnline event which is picked up by the SDE and the volume is shown as online in the front end UI. Primary storage container starts the phase 2 scanner (data pull) automatically. Pod polls the primary storage container using REST calls to get the phase 2 scanner progress and updates the Volume CR. Once all the data is pulled, primary storage container converts the Ondemand volume to a normal volume. The performance limitations no longer apply and the volume performs like any read/write volume. Once the transfer completes the pod is assigned a ‘restored’ state. The pod decrements the refcount from the Snapshot-in-cloud CR.

FIG. 10A illustrates a system 1000 for managing objects within an object store (a remote object store) using an object file system. The objects may store backup data of snapshots that can be restored on-demand to an on-demand volume using a restore process (e.g., an on-demand restore operation) such that clients are provided with access to the backup data during and before completion of the restore process. A computing device 1002 may comprise a node, a storage controller, a storage service, an on-premises computing device, a storage virtual machine, or any other hardware or software. The computing device 1002 may store data 1006 within storage devices (primary storage) managed by the computing device 1002. The computing device 1002 may provide client devices with access to the data 1006, such as by processing read and write operations from the client devices. The computing device 1002 may create snapshots 1004 of the data 1006, such as a snapshot of a file system of a volume accessible to the client devices through the computing device 1002. The computing device 1002 may be configured to communicate with an object store 1009 over a network. The object store 1009 (a remote object store that may be remote to the computing device 1002) may comprise a cloud computing environment remote to the computing device 1002.

As provided herein, an object file system and object format is provided for storing and accessing data, such as snapshots, stored within objects in the object store 1009. The data 1006, maintained by the computing device, is stored into a plurality of slots of an object 1008. Each slot represents a base unit of data of the object file system defined for the object store 1009. For example, the object 1008 comprises or any other number of slots (e.g., 1024 slots), wherein each slot comprises 10 kb of data or any other amount of data. It may be appreciated that objects may comprise any number of slots of any size. User data, directory blocks, metadata, and/or inofile blocks of an inofile comprising per inode metadata is stored into the slots of the object 1008. In an example, snapshot data, of a snapshot created by the computing device 1002 of a file system maintained by the computing device 1002, is stored into the object 1008. For example, the object 1008 may be maintained as an independent logical representation of the snapshot, such that data of the snapshot is accessible through the object 1008 without having to reference other logical copies of other snapshots stored within objects 1010 of the object store 1009. In an example, the data is converted from physical data into a version independent format for storage within the object 1008.

In an example, the object 1008 is created to comprise data in a compressed state corresponding to compression of the data within the primary storage of the computing device 1002. In this way, compression used by the computing device 1002 to store the data is retained within the object 1008 for storage within the object store 1009. The object 1008 may be assigned a unique sequence number. Each object within the object store 1009 is assigned unique sequence numbers.

An object header may be created for the object 1008. The object header comprises a slot context for slots within the object 1008. The slot context may comprise information relating to a type of compression used for compressing data within the object 1008 (if any compression is used), a start offset of a slot, a logical data length, a compressed data length, etc. The slot context may be used to access compressed data stored within the object 1008.

FIG. 10C illustrates an example of the object 1008. The object 1008 comprises an object header 1036 and a plurality of slots, such as a slot 1026, a slot 1028, a slot 1030, and/or any other number of slots. The object header 1036 may have a size that is aligned with a start of the plurality of slots, such as having a 10 kb alignment based upon each slot having a logical length of 10 kb. It may be appreciated that slots may have any length. The object header 1036 comprises various information, such as a version identifier, a header checksum, a length of the object 1008, a slot context 1032, and/or other information used to access and manage data populated into the slots of the object 1008.

The slot context 1032 comprises various information about the slots, such as a compression type of a slot (e.g., a type of compression used to compress data of slots into a compression group or an indicator that the slot does not comprise compressed data), a start offset of the slot within the object 1008 (e.g., a slot identifier multiplied by a slot size, such as 10 kb), a logical data length of the slot (e.g., 10 kb), a compressed length (e.g., 0 if uncompressed), an index of the slot within a compression group of multiple slots (e.g., 0 if uncompressed), a logical data checksum, etc.

The data stored within the slots of the object 1008 are represented as a data structure (e.g., a structure that is traversable by a data connector component). The data structure may comprise a tree structure or any other type of structure. For example, the data structure comprises the tree structure representing a file. The data structure may be populated with a plurality of nodes at various levels of the tree structure. The nodes may be represented by cloud block numbers. A cloud block number of a node may comprise a sequence number used to uniquely identify the object 1008 and/or a slot number of a slot comprising a portion of the data represented by the node. User data, directory blocks, metadata, inofile blocks of an inofile, and/or other data stored within the slots of the object 1008 may be represented by nodes within the data structure. In an example, user data is stored within leaf nodes of the data structure (e.g., nodes within a level 0 (L0) level of the tree structure). Pointers (indirects) may be stored within non-leaf nodes of the data structure (e.g., nodes within a level 1(L1), a level 2 (L2), and/or other levels of the tree structure). An inode object for the file may comprise pointers that point to non-leaf nodes within a top level of the data structure.

In an example of the tree structure, a 1 TB file may be represented by the tree structure. An inode of the file may comprise metadata and/or a flat list of 4845 pointers or any other number of pointers to nodes within a level 2 of the tree structure (e.g., there are 4845 nodes (4 kb blocks) within the level 2 of the tree structure). The level 2 comprises the 4845 nodes (4 kb blocks), each having 255 pointers or any other number of pointers to nodes within a level 1 of the tree structure (e.g., there are 980393 (4 kb blocks) within the level 1 of the tree structure. The level 1 comprises the 980393 (4 kb blocks), each having 255 pointers to nodes within a level 0 of the tree structure. The level 0 comprises 250,000,000 nodes (4 kb blocks) representing actual data, such as user data.

FIG. 10B illustrates a snapshot file system of data structures 1024 (e.g., a tree structure that can be traversed by a data connector component) used to represent snapshots (e.g., snapshots of one or more volumes managed by the computing device 1002) stored into the objects 1010 of the object store 1009. There is one base root object per volume, such as a base root object 1012 for a volume of which the snapshots were captured. There is a unique root object per volume, such as a unique root object 1014 for the volume. The base root object 1012 may point to the unique root object 1014. Names of the unique root objects may be derived from increasing generation numbers. The unique root object 1014 may point to snapinfo objects, such as a snapinfo object 1016 comprising information regarding one or more snapshots, such as a pointer to an inofile 1018 of a second snapshot of the volume. The inofile 1018 comprises cloud block numbers of slots within an object comprising data of the second snapshot, such as a pointer to an indirect 1020 that points to data 1022 of the snapshot. The inofile 1018 may comprise or point to information relating to directories, access control lists, and/or other information.

A mapping metafile (a VMAP) is maintained for the object 1008. The mapping metafile maps block numbers of primary storage of the computing device 1002 (e.g., virtual volume block numbers of the data stored into slots of the object 1008) to cloud block numbers of nodes representing portions of the data stored within the slots of the object 1008. The object 1008 is stored within the object store 1009. In an example of storing objects into the object store 1009, the plurality of snapshots 1004, maintained by the computing device 1002, are stored within objects 1010 of the object store 1009. Each snapshot is identifiable through a snapinfo object that has a unique generation number. As will be described later, the objects 1010 within the object store 1009 may be deduplicated with respect to one another (e.g., the object 1008 is deduplicated with respect to the object 1010 using the mapping metafile as part of being stored into the object store 1009) and retain compression used by the computing device 1002 for storing the snapshots 1004 within the primary storage.

The mapping metafile and/or the data structure are used to provide access through the object file system to portions of data within the slots of the object 1008 in the object store 1009. In an example, the inode object and the data structure are traversed to identify a sequence number and slot number of requested data. The sequence number and the slot number are used to access the requested data within a corresponding slot of the object 1008. In an example, a read request targets a 100,000th level 0 block stored within the object 1008. The inode object is read to calculate which blocks in each level of the data structure will have 100,000 (e.g., 100,000/255 is a 493th block in level 1 and 493/255 is a 2^(nd) block in level 2). These blocks are read at each level to go to a next level through appropriate pointers (e.g., cloud block numbers) until the data is read from a block of user data within the level 0. The pointers are cloud block numbers, where a pointer comprises a sequence number of the object 1008 and a slot number. The sequence number corresponds to an object name of the object 1008 and the slot number is which slot the data is located within the object 1008.

In an embodiment, an on-demand restore of data within a snapshot stored within objects of the object store 1009 can be performed to a target computing device using the mapping metafile and/or the data structure. In an embodiment, the mapping metafile and/or the data structure may be used to free objects from the object store 1009 based upon the objects comprising snapshot data of snapshots deleted by the computing device 1002.

In an embodiment, the mapping metafile and/or an overflow mapping metafile are used to facilitate the copying of the snapshots to the object store 1009 in a manner that preserves deduplication and compression, logically represents the snapshots as fully independent snapshots, and provides additional compression. In particular, the mapping metafile is populated with entries for block numbers (e.g., virtual volume block numbers, physical volume block numbers, etc. used by the node to reference data such as snapshot data stored by the node) of the snapshots 1004 maintained by the computing device 1002 and copied into the objects 1010 of the object store 1009 as copied snapshots. An entry within the mapping metafile is populated with a mapping between a block number of data within a snapshot at the computing device 1002 (e.g., a virtual volume block number) and a cloud block number (e.g., a cloud physical volume block number) of a slot within an object into which the data was copied when the snapshot was copied to the object store 1009 as a copied snapshot. The entry is populated with a compression indicator to indicate whether data of the block number is compressed or not (e.g., a bit set to a first value to indicate a compressed virtual volume block number and set to a second value to indicate a non-compressed virtual volume block number).

The entry is populated with a compression group start indicator to indicate whether the block number is a starting block number for a compression group of a plurality of block numbers of compressed data blocks. The entry is populated with an overflow indicator to indicate whether the data block has an overflow entry within the overflow mapping metafile. The overflow mapping metafile may comprise a V+ tree, such as a special B+ tree with support for variable length key and payload so a key can be sized according to a type of entry being stored for optimization. The key uniquely represents all types of entries associated with a block number (a virtual volume block number). The key may comprise a block number field (e.g., the virtual volume block number of a data block represented by the block number or a starting virtual volume block number of a first data block of a compression group comprising the data block), a physical length of an extent of the data block, if the corresponding entry is a start of a compression group, and other block numbers of blocks within the compression group. The payload is a cloud block number (a cloud physical volume block number). The entry may be populated with a logical length of an extent associated with the block number. The entry may be populated with a physical length of the extent associated with the block number.

The mapping metafile and/or the overflow mapping metafile may be indexed by block numbers of the primary storage (e.g., virtual volume block numbers of snapshots stored by the computing device 1002 within the primary storage, which are copied to the object store as copied snapshots). In an example, the block numbers may correspond to virtual volume block numbers of data of the snapshots stored by the computing device 1002 within the primary storage. In an example, a block number corresponds to a starting virtual volume block number of an extent of a compression group.

The mapping metafile and/or the overflow mapping metafile is maintained according to a first rule specifying that the mapping metafile and/or the overflow mapping metafile represent a comprehensive set of cloud block numbers corresponding to a latest snapshot copied to the object. The mapping metafile and/or the overflow mapping metafile is maintained according to a second rule specifying that entries within the mapping metafile and/or the overflow mapping metafile are invalidated based upon any block number in the entries being freed by the computing device 1002.

The mapping metafile and/or the overflow mapping metafile is used to determine what data of the current snapshot is to be copied to the object store 1009 and what data already exists within the object store 1009 so that only data not already within the object store 1009 is transmitted to the object store 1009 for storage within an object. Upon determining that the current snapshot is to be copied to the object store 1009, an invalidation phase is performed. In particular, a list of deallocated block numbers of primary storage of the computing device 1002 (e.g., virtual volume block numbers, of the file system of which snapshots are created, that are no longer being actively used to store in-use data by the node) are determined based upon a difference between a first snapshot and a second snapshot of the primary storage (e.g., a difference between a base snapshot and an incremental snapshot of the file system). As part of the invalidation phase, entries for the list of deallocated block numbers are removed from the mapping metafile and/or the overflow mapping metafile.

After the invalidation phase, a list of changed block numbers corresponding to changes between the current snapshot of the primary storage being copied to the object store 1009 and a prior copied snapshot already copied from the primary storage to the object store 1009 is determined. The mapping metafile is evaluated using the list of changed block numbers to identify a deduplicated set of changed block numbers without entries within the mapping metafile. The deduplicated set of changed block numbers correspond to data, of the current snapshot, not yet stored within the object store 1009.

An object is created to store data of the deduplicated set of changed block numbers. The object comprises a plurality of slots, such as 1024 or any other number of slots. The data of the deduplicated set of changed block numbers is stored into the slots of the object. An object header is updated with metadata describing the slots. In an example, the object is created to comprise the data in a compressed state corresponding to compression of the data in the primary storage. The object can be compressed by combining data within contiguous slots of the object into a single compression group. In this way, compression of the current snapshot maintained by the node is preserved when the current snapshot is stored in the object store as the object corresponding to a copy of the current snapshot.

The object, comprising the data of the deduplicated set of changed block numbers, is transmitted to the object store 1009 for storage as a new copied snapshot that is a copy of the current snapshot maintained by the node. The object is stored as a logical copy of the current snapshot. Also, additional compression is applied to this logical data, and information used to uncompress the logical data is stored in the object header. Further, the object is maintained as an independent logical representation of the current snapshot, such that copied data, copied from the current snapshot, is accessible through the object without having to reference other logical copies of other copied snapshots stored in other objects within the object store 1009. Once the object is stored within the object store 1009, the mapping metafile and/or the overflow mapping metafile is updated with entries for the deduplicated set of changed block numbers based upon receiving an acknowledgment of the object being stored by the object store 1009. An entry will map a changed block number to a cloud block number of a slot within which data of the changed block number is stored in the object.

In an embodiment, the object file system is used to provide various primary storage system services for the object store 1009 in order to achieve efficient space and resource management, and flexible scaling in the object store 1009 (e.g., a cloud computing environment). Additionally, pseudo read only snapshots are provided through the object store 1009. Consumers of these snapshots may choose to derive just the logical data represented by these snapshots or can additionally derive additional metadata associated with the logical data if required. This additional metadata is created post snapshot creation and hence is not directly part of logical view of the snapshot. The present system provides flexible, scalable, and cost effective techniques for leveraging cloud storage for off-premises operations on secondary data, such as analytics, development testing, virus scan, load distribution, etc. Objects may be modified (e.g., a unit of storage within a cloud storage environment) without changing the meaning or accessibility of useable data in the objects (e.g., a cloud object comprising a snapshot copy of primary data maintained by the computing device 1002). Objects may be modified to add additional metadata and information such as analytics data, virus scan data, etc. to useable data without modifying the useable data. Thus, an object is maintained as a pseudo read only object because in-use data is unmodifiable while unused or freed data is modifiable such as by a defragmentation and/or garbage collection process.

Changes in objects can be detected in order to resolve what data of the objects is the correct data. The present system provides the ability to perform defragmentation and garbage collection for objects by a cloud service hosted by the object store 1009, such as a cloud storage environment. Defragmentation and garbage collection are provided without affecting access to other in-use data within objects (e.g., in-use snapshot data stored within an object that is used by one or more applications at various remote computers). This allows for more true distributed and infinite scale data management. The present system provides for the ability to run analytics on objects (e.g., read/write analytics of data access to data within an object) using analytic applications hosted within the cloud storage environment. The analytics can be attached to objects even though the objects are read only. The present system provides for deduplication of objects. In this way, objects can be modified while still maintaining consistency of in-use data within the objects (e.g., maintaining consistency of a file system captured by a snapshot that is stored within an object) and without compromising a read only attribute of the objects. Also, computationally expensive processes like garbage collection, analytics, and defragmentation are offloaded from on-premises primary storage systems, such as the computing device 1002, to the object store 1009 such as cloud services within the cloud storage environment.

In one embodiment, objects within the object store 1009 (e.g., objects within a cloud computing environment) can be maintained with a read only attribute such that data within objects can be overwritten/modified/freed so long as in-use data within the objects is not altered. In particular, an object may be maintained within the object store 1009, such as a cloud computing environment. The object comprises a plurality of slots, such as 1024 or any other number of slots. Each slot is used to store a unit of data. The data within each slot is read-only. In particular, the data is read only when in-use, such as where one or more applications are referencing or using the data (e.g., an application hosted by the computing device 1002 is storing data of a snapshot of a local file system within a slot of an object, and thus the snapshot data is in-use until a particular event occurs such as the computing device 1002 deleting the snapshot). In an example, the object comprises snapshot data of a file system, a volume, a logical unit number (LUN), a file, or any other data of the computing device 1002. In this way, the object comprises a read only snapshot of data of the computing device 1002. In one example, a plurality of objects corresponding to read only snapshots of the file system of the computing device 1002 are stored within the object store 1009. Each object is assigned a unique sequence identifier.

A first rule is enforced for the object. The first rule specifies that in-use slots are non-modifiable and unused slots are modifiable. An in-use slot is a slot that stores data actively referenced, used, and/or maintained by a computing device 1002 (a primary storage system). For example, an in-use slot may be a slot that comprises snapshot data (e.g., secondary/replicated data) of a snapshot created by a computing device 1002. The slot becomes an unused slot when the data is no longer actively referenced, used, and/or maintained, such as where the computing device 1002 deletes the snapshot. Thus, if a slot is in-use, then the data within the slot cannot be modified. Otherwise, data in unused slots (e.g., stale data that is no longer referenced or used) can be modified, such as deleted/freed by garbage collection functionality or defragmentation functionality.

Additional information for the object may be generated. The additional information may comprise analytics (e.g., read/write statistics of access to the object), virus scan information, development testing data, and/or a variety of other information that can be generated for the object and the data stored therein. In an example, the additional data is generated by a cloud service or application executing within the cloud computing environment. This will offload processing and resource utilization that would otherwise be used by the computing device 1002 (primary storage system) to perform such analytics and processing.

Metadata of the additional information is attached to an object header of the object. The object header is used to store metadata for each slot of the object. In one example, the metadata specifies a location of the additional information within the object, such as a particular slot into which the additional information is stored. In another example, the metadata may comprise the additional information, and thus the additional information is stored into the object header. The metadata is attached in a manner that does not change a meaning or accessibility of useable data within in-use slots of the object. In particular, applications that are allowed to merely access user data within the object (e.g., the applications are unaware or have no reason to access the additional information) are provided with only access to the user data and are not provided with access to the metadata or additional information. Thus, these applications continue to access user data within the object in a normal manner. For application that are allowed to access both the user data and the additional information, those applications are provided with access to the user data and the metadata for identifying and accessing a location of the additional information within the object. The first rule is enforced such that user data (in-use data) is retained in an unmodified state within the object notwithstanding the metadata and/or additional information being associated with the object.

In an example, a second rule is enforced for the object. The second rule specifies that related read operations are to be directed to a same version of an object. For example, an object corresponds to secondary/replicated snapshot data of a file system maintained by the computing device 1002. Each time a new snapshot of the file system is created, a new version of the object is created to capture changes to the file system. In another example, since in-use data within the object is read only and unmodifiable, any modifications to slots with in-use data will result in a new version of the object being created with the modified data.

If multiple read operations are related, then those read operations should be executed upon the same version of the object for data consistency purposes. This is achieved by comparing timestamp data of the related read operations. If the timestamp data between the related read operations is mismatched, then the related read operations are retried because the related read operations were executed upon different versions of the same object. If the timestamp data between the read operations matches, then the related read operations are considered successful. In an example, a first related read operation reads the object header of the object to identify a slot from which data is to be read. A second related read operation is executed to read data from the slot. The two related read operations should be executed upon the same version of the object/slot (e.g., the operations can be executed upon different versions such as where data of a current version of the object is modified between execution of the operations, thus creating a new version of the object with the modified data since the object is read only and the original data is unmodifiable within the current version of the object). Thus, timestamp data of the two related read operations is used to determine whether the two related read operations were executed upon the same version of the object/slot and thus should be considered complete or should be retried.

In one embodiment, garbage collection is provided for objects within the object store 1009. The objects have a read only state, such that enforcement of the first rule ensures that in-use data within slots of an object is not modifiable, thus making objects pseudo read only objects because only unused slots can be modified/freed of unused data. In an example, an object is used to store data of a snapshot of a file system hosted by the computing device 1002. The snapshot may be determined as being deleted by the computing device 1002, and thus slots comprising snapshot data of the deleted snapshot are now considered to be unused slots as opposed to in-use slots.

Each snapshot of the file system may be associated with a bitmap that identifies objects within the object store that correspond to a particular snapshot. Thus, the bitmaps can be evaluated to identify what objects comprise data of particular snapshots. For example, a bitmap of the deleted snapshot can be used to identify the object and other objects as comprising data of the deleted snapshot.

A garbage collection operation is executed to free objects (e.g. free unused data from unused slots) from the object store in order to reduce storage utilization of the object store that would otherwise be unnecessarily used to store stale/unused data. In an example, the garbage collection operation is executed by a cloud service in order to conserve resource consumption by the computing device 1002 (primary storage system) otherwise used to execute the garbage collection operation. The garbage collection operation free objects from the object store 1009 based upon the objects uniquely corresponding to deleted snapshots. That is, if an object stores data of only deleted snapshots and does not store data of active/undeleted snapshots, then the garbage collection process can free/delete that object. For example, the bitmaps describing objects within the object store 1009 that are related to snapshots of the file system are evaluated to determine whether the object is unique to the deleted snapshot and/or unique to only deleted snapshots (e.g., the object does not comprise data of active/undeleted snapshots). If so, then the object is freed from the object store 1009. However, if the object is not unique to only deleted snapshot(s) such as where the object also stores data of an active/undeleted snapshot, then the object is not freed.

In an embodiment, defragmentation is provided for fragmented objects within the object store 1009. In an example, defragmentation is implemented by a cloud service or application executing in the object store 1009 in order to conserve resources otherwise used by a computing device 1002 (primary storage system) that would execute defragmentation functionality. An object within the object store 1009 is determined to be a fragmented object based upon the object comprising at least one freed slot from which data was freed. For example, a freed slot may comprise an unused slot comprising unused data no longer referenced/used by the computing device 1002 (e.g., data of a deleted snapshot). Accordingly, the fragmented object may comprise one or more in-use slots of in-use data currently referenced/used by a computing device 1002 and one or more freed slots of freed data (e.g., unused slots comprising unused data).

The fragmented object is compacted to retain the in-use data and exclude the freed data (the unused data) as a written object. Because compacting may store the in-use data in new slots, an object header of the object is updated with new locations of the in-use data within the rewritten object. In this way, defragmentation is performed for objects within the object store 1009.

The present system preserves deduplication and compression used by the computing device 1002 for snapshots when storing copied snapshots to the object store 1009 notwithstanding copied snapshots representing fully logical copies of data in the primary storage of the computing device 1002. In particular, deduplication is preserved because data that is shared in a snapshot (e.g., a local or primary snapshot created and maintain by the node) is also shared in a copied snapshot in the object store 1009. Deduplication of compression groups is maintained while logically representing the compression groups in a copied snapshot. Block sharing across multiple snapshots is also preserved so that merely changed blocks are transferred/copied to the object store 1009 during incremental snapshot transfers.

Additional compression may be provided for a snapshot data copy. In particular, larger compression groups provide more space efficiency but with less read efficiency compared to smaller compression groups. Relatively smaller compression groups may be used by the computing device 1002 of the storage system since access to the primary storage of the computing device 1002 may be more read intensive, and thus read efficiency is prioritized over storage space efficiency. Because copied snapshots in the object store 1009 are infrequently accessed (e.g., cold data that is infrequently read), relatively larger compression groups can be employed for improved storage space efficiency within the object store, which also reduces network bandwidth for snapshot copying to the object store 1009.

In one embodiment, snapshots maintained by the computing device 1002 are copied to the object store 1009 as copied snapshots representing logical data of the snapshots. Data of the copied snapshots is stored into slots of objects that are deduplicated with respect to other objects stored within the object store 1009 and retain compression used by the computing device 1002 for the snapshots.

In an example, the computing device 1002 stores data within primary storage. The computing device 1002 may create snapshots of the data stored by the computing device 1002. For example, the computing device 1002 may create a snapshot of a file, a logical unit number, a directory, a volume, a storage virtual machine hosting a plurality of volumes, a file system, a consistency group of any arbitrary grouping of files, directories, or data, etc. The computing device 1002 may deduplicate data between the snapshots so that instead of storing redundant data blocks multiple times, merely references are stored in place of the redundant data blocks and point to original data blocks with the same data. The computing device 1002 may compress data within the snapshots, such as by creating compression groups of compressed data blocks.

The mapping metafile and/or the overflow mapping metafile is used to determine what data of the current snapshot is to be copied to the object store 1009 and what data already exists within the object store so that only data not already within the object store is transmitted to the object store 1009 for storage within an object. Upon determining that the current snapshot is to be copied to the object store, an invalidation phase is performed. In particular, a list of deallocated block numbers of primary storage of the computing device 1002 (e.g., virtual volume block numbers, of the file system of which snapshots are created, that are no longer being actively used to store in-use data by the node) are determined based upon a difference between a first snapshot and a second snapshot of the primary storage (e.g., a difference between a base snapshot and an incremental snapshot of the file system). As part of the invalidation phase, entries for the list of deallocated block numbers are removed from the mapping metafile and/or the overflow mapping metafile.

Still another embodiment involves a computer-readable medium 1100 comprising processor-executable instructions configured to implement one or more of the techniques presented herein. An example embodiment of a computer-readable medium or a computer-readable device that is devised in these ways is illustrated in FIG. 11 , wherein the implementation comprises a computer-readable medium 1108, such as a compact disc-recordable (CD-R), a digital versatile disc-recordable (DVD-R), flash drive, a platter of a hard disk drive, etc., on which is encoded computer-readable data 1106. This computer-readable data 1106, such as binary data comprising at least one of a zero or a one, in turn comprises processor-executable computer instructions 1104 configured to operate according to one or more of the principles set forth herein. In some embodiments, the processor-executable computer instructions 1104 are configured to perform a method 1102, such as at least some of the exemplary method 400 of FIG. 4 , for example. In some embodiments, the processor-executable computer instructions 1104 are configured to implement a system, such as at least some of the exemplary system 500 of FIGS. 5A-5E, for example. Many such computer-readable media are contemplated to operate in accordance with the techniques presented herein.

In an embodiment, the described methods and/or their equivalents may be implemented with computer executable instructions. Thus, in an embodiment, a non-transitory computer readable/storage medium is configured with stored computer executable instructions of an algorithm/executable application that when executed by a machine(s) cause the machine(s) (and/or associated components) to perform the method. Example machines include but are not limited to a processor, a computer, a server operating in a cloud computing system, a server configured in a Software as a Service (SaaS) architecture, a smart phone, and so on. In an embodiment, a computing device is implemented with one or more executable algorithms that are configured to perform any of the disclosed methods.

It will be appreciated that processes, architectures and/or procedures described herein can be implemented in hardware, firmware and/or software. It will also be appreciated that the provisions set forth herein may apply to any type of special-purpose computer (e.g., file host, storage server and/or storage serving appliance) and/or general-purpose computer, including a standalone computer or portion thereof, embodied as or including a storage system. Moreover, the teachings herein can be configured to a variety of storage system architectures including, but not limited to, a network-attached storage environment and/or a storage area network and disk assembly directly attached to a client or host computer. Storage system should therefore be taken broadly to include such arrangements in addition to any subsystems configured to perform a storage function and associated with other equipment or systems.

In some embodiments, methods described and/or illustrated in this disclosure may be realized in whole or in part on computer-readable media. Computer readable media can include processor-executable instructions configured to implement one or more of the methods presented herein, and may include any mechanism for storing this data that can be thereafter read by a computer system. Examples of computer readable media include (hard) drives (e.g., accessible via network attached storage (NAS)), Storage Area Networks (SAN), volatile and non-volatile memory, such as read-only memory (ROM), random-access memory (RAM), electrically erasable programmable read-only memory (EEPROM) and/or flash memory, compact disk read only memory (CD-ROM)s, CD-Rs, compact disk re-writeable (CD-RW)s, DVDs, cassettes, magnetic tape, magnetic disk storage, optical or non-optical data storage devices and/or any other medium which can be used to store data.

Although the subject matter has been described in language specific to structural features or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing at least some of the claims.

Various operations of embodiments are provided herein. The order in which some or all of the operations are described should not be construed to imply that these operations are necessarily order dependent. Alternative ordering will be appreciated given the benefit of this description. Further, it will be understood that not all operations are necessarily present in each embodiment provided herein. Also, it will be understood that not all operations are necessary in some embodiments.

Furthermore, the claimed subject matter is implemented as a method, apparatus, or article of manufacture using standard application or engineering techniques to produce software, firmware, hardware, or any combination thereof to control a computer to implement the disclosed subject matter. The term “article of manufacture” as used herein is intended to encompass a computer application accessible from any computer-readable device, carrier, or media. Of course, many modifications may be made to this configuration without departing from the scope or spirit of the claimed subject matter.

As used in this application, the terms “component”, “module,” “system”, “interface”, and the like are generally intended to refer to a computer-related entity, either hardware, a combination of hardware and software, software, or software in execution. For example, a component includes a process running on a processor, a processor, an object, an executable, a thread of execution, an application, or a computer. By way of illustration, both an application running on a controller and the controller can be a component. One or more components residing within a process or thread of execution and a component may be localized on one computer or distributed between two or more computers.

Moreover, “exemplary” is used herein to mean serving as an example, instance, illustration, etc., and not necessarily as advantageous. As used in this application, “or” is intended to mean an inclusive “or” rather than an exclusive “or”. In addition, “a” and “an” as used in this application are generally be construed to mean “one or more” unless specified otherwise or clear from context to be directed to a singular form. Also, at least one of A and B and/or the like generally means A or B and/or both A and B. Furthermore, to the extent that “includes”, “having”, “has”, “with”, or variants thereof are used, such terms are intended to be inclusive in a manner similar to the term “comprising”.

Many modifications may be made to the instant disclosure without departing from the scope or spirit of the claimed subject matter. Unless specified otherwise, “first,” “second,” or the like are not intended to imply a temporal aspect, a spatial aspect, an ordering, etc. Rather, such terms are merely used as identifiers, names, etc. for features, elements, items, etc. For example, a first set of information and a second set of information generally correspond to set of information A and set of information B or two different or two identical sets of information or the same set of information.

Also, although the disclosure has been shown and described with respect to one or more implementations, equivalent alterations and modifications will occur to others skilled in the art based upon a reading and understanding of this specification and the annexed drawings. The disclosure includes all such modifications and alterations and is limited only by the scope of the following claims. In particular regard to the various functions performed by the above described components (e.g., elements, resources, etc.), the terms used to describe such components are intended to correspond, unless otherwise indicated, to any component which performs the specified function of the described component (e.g., that is functionally equivalent), even though not structurally equivalent to the disclosed structure. In addition, while a particular feature of the disclosure may have been disclosed with respect to only one of several implementations, such feature may be combined with one or more other features of the other implementations as may be desired and advantageous for any given or particular application. 

What is claimed is:
 1. A method comprising: storing a snapshot of a volume hosted by a node into one or more objects formatted according to an object format; assigning an expiry time to the snapshot and the one or more objects based upon a creation time of the snapshot and a retention time; storing the one or more objects within a remote object store, wherein the one or more objects are retained in an immutable state and cannot be deleted until expiration of the expiry time; and in response to identifying an existing object within the remote object store comprising shared snapshot data referenced by the snapshot, modifying an assigned expiry time of the existing object based upon the expiry time assigned to the one or more objects to create a modified expiry time for the existing object.
 2. The method of claim 1, wherein the existing object comprises snapshot data of a prior snapshot of the volume and the snapshot comprises an incremental snapshot created subsequent the prior snapshot, wherein the prior snapshot and the incremental snapshot both share and reference the shared snapshot data within the existing object created to store the snapshot data of the prior snapshot.
 3. The method of claim 1, comprising: defining the retention time as a period of time during which the snapshot is to be retained in the immutable state and cannot be deleted.
 4. The method of claim 1, wherein the assigned expiry time is derived from a creation time of a prior snapshot of the volume and the retention time.
 5. The method of claim 4, wherein the modifying comprises: in response to determining that the assigned expiry time of the existing object is earlier in time compared to the expiry time assigned to the one or more objects, increasing the assigned expiry time to create the modified expiry time.
 6. The method of claim 1, comprising: assigning expiry times to objects for storage within the remote object store, wherein the expiry times can be extended but are blocked from being shortened.
 7. The method of claim 1, comprising: executing a scanner to evaluate metadata structures associated with the object format to identify the existing object as comprising the shared snapshot data referenced by the snapshot.
 8. The method of claim 1, comprising: migrating the one or more objects from a standard storage tier of the remote object store to an archival storage tier of the remote object store; and retaining the expiry time for the one or more objects in the archival storage tier.
 9. The method of claim 1, comprising: migrating the existing object from a standard storage tier of the remote object store to an archival storage tier of the remote object store; and retaining the modified expiry time for the existing object in the archival storage tier.
 10. The method of claim 1, comprising: calculating the expiry time based upon the creation time of the snapshot, the retention time, and a delta time.
 11. The method of claim 10, comprising: determining the delta time based upon a cost metric associated with identifying and updating assigned expiry times of existing objects comprising shared snapshot data shared with newly created snapshots.
 12. The method of claim 10, comprising: determining the delta time based upon a frequency at which snapshots of the volume are created.
 13. The method of claim 1, wherein the object format represents the snapshot using a hierarchical tree structure comprising a super block, a snapshot root block, an inofile, one or more levels of indirect blocks, and a level of direct blocks corresponding to snapshot data of the snapshot.
 14. The method of claim 13, comprising: executing a scanner to traverse the hierarchical tree structure to identify one or more existing objects comprising shared snapshot data shared with the snapshot.
 15. The method of claim 1, comprising: executing a scanner to evaluate a bitmap of the snapshot to identify the existing object as comprising the shared snapshot data referenced by the snapshot, wherein bits within the bitmap are set to indicate which objects within the remote object store comprise snapshot data referenced by the snapshot.
 16. A computing device comprising: a memory comprising machine executable code; and a processor coupled to the memory, the processor configured to execute the machine executable code to cause the processor to: store snapshot data of a first snapshot into a first object formatted according to an object format; assign a first expiry time to the first object based upon a first creation time of the first snapshot and a retention time; store the first object within a remote object store, wherein the first object is retained in an immutable state and cannot be deleted until expiration of the first expiry time; store snapshot data of a second snapshot into a second object formatted according to the object format; assign a second expiry time to the second object based upon a second creation time of the second snapshot and the retention time; store the second object within the remote object store, wherein the second object is retained in the immutable state and cannot be deleted until expiration of the second expiry time; and in response to determining that the second snapshot references shared snapshot data within the first object, modify the first expiry time of the first object to be the second expiry time of the second object.
 17. The computing device of claim 16, wherein the machine executable code causes the processor to: calculate the expiry time based upon the creation time of the snapshot, the retention time, and a delta time.
 18. The computing device of claim 17, wherein the machine executable code causes the processor to: determine the delta time based upon at least one of a frequency at which snapshots are created or a cost metric associated with identifying and updating assigned expiry times of existing objects comprising shared snapshot data shared with newly created snapshots.
 19. A non-transitory machine readable medium comprising instructions for performing a method, which when executed by a machine, causes the machine to: store snapshot data of a first snapshot into a first object; assign a first expiry time to the first object; store the first object within a remote object store, wherein the first object is retained in an immutable state and cannot be deleted until expiration of the first expiry time; store snapshot data of a second snapshot into a second object; assign a second expiry time to the second object; store the second object within the remote object store, wherein the second object is retained in the immutable state and cannot be deleted until expiration of the second expiry time; and in response to determining that the second snapshot references shared snapshot data within the first object, modify the first expiry time of the first object to be the second expiry time of the second object.
 20. The non-transitory machine readable medium of claim 19, wherein the instructions cause the machine to: determine a delta time based upon at least one of a frequency at which snapshots are created or a cost metric associated with identifying and updating assigned expiry times of existing objects comprising shared snapshot data shared with newly created snapshots; and calculate the expiry time based upon a creation time of the snapshot, a retention time, and the delta time. 